CVE-2013-6444
python-pywbem: PyWBEM 0.7 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (C...
CVE-2013-6444 is fixed in python-pywbem on 1 platform by python-pywbem 0.8.0~dev650-1 (version 0.8.0~dev650-1), released May 5, 2014. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0106
64th percentile
PyWBEM 0.7 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| python-pywbem · Ubuntu 18.04.6 LTS (bionic) | 0.8.0~dev650-1 | python-pywbem 0.8.0~dev650-1 | May 5, 2014 |